Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-5447. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates an out-of-bounds read vulnerability in Firefox (CVE-2017-5447) by manipulating DOM elements and CSS properties to trigger a heap-buffer-overflow. The PoC uses a combination of JavaScript and HTML to force the browser into an unstable state, as confirmed by the AddressSanitizer (ASan) log.
Description
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Exploits (1)
This exploit demonstrates an out-of-bounds read vulnerability in Firefox (CVE-2017-5447) by manipulating DOM elements and CSS properties to trigger a heap-buffer-overflow. The PoC uses a combination of JavaScript and HTML to force the browser into an unstable state, as confirmed by the AddressSanitizer (ASan) log.
References (12)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H